Privacy Policy
This policy explains how Upranked ("we", "us", or "our") collects, uses, and protects information when you use our reputation management platform at upranked.co.
1. What We Collect
We collect only the information needed to provide our service:
- Account information: your name and email address when you create an account or accept an invitation.
- Business information: your business name, contact details, and Google Business Profile URL that you provide when setting up your client profile.
- Google Business Profile data: review content, star ratings, reviewer display names, and review dates fetched from the Google Business Profile API on your behalf after you grant access.
- Review request data: names and email addresses of customers you ask us to send review requests to.
- Usage data: basic logs of actions within the platform (review requests sent, syncs performed) for audit and reporting purposes.
We do not collect payment card numbers, government IDs, or any other sensitive personal data.
2. How We Use Your Information
- To display your Google reviews in your Upranked dashboard.
- To send review request emails to customers on your behalf.
- To generate reputation reports for your business.
- To notify you of low-rating feedback submitted through the platform.
- To operate, maintain, and improve the platform.
- To communicate with you about your account or service updates.
We do not sell your data or your customers' data to any third party. We do not use your data for advertising. Google Business Profile data is used solely to display reviews within your Upranked account.
3. Google API Usage
Upranked uses the Google Business Profile API to read reviews associated with your business listing. Access is granted only after you explicitly authorise it through Google's OAuth 2.0 consent flow.
- We request read access to your Google Business Profile reviews only.
- We do not post, edit, or delete any content on your Google Business Profile.
- We do not access your Gmail, Google Drive, Google Calendar, or any other Google product.
- Your Google OAuth refresh token is stored encrypted and used solely to periodically fetch new reviews.
- You can revoke access at any time via your Google Account security settings at myaccount.google.com/permissions.
Upranked's use of data obtained from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
4. Data Sharing and Third Parties
We share data with the following service providers only as necessary to operate the platform:
- Supabase — database and authentication infrastructure. Data is stored in encrypted, access-controlled databases.
- Resend — transactional email delivery for review request emails and platform notifications.
- Vercel — hosting and edge delivery for the web application.
- Google — Business Profile API for reading your review data.
All third-party providers are bound by their own privacy policies and data processing agreements. We do not share your data with any other party.
5. Data Retention
We retain your account data for as long as your account is active. Review data is retained to power your historical reports and trend charts. Customer email addresses submitted for review requests are retained as part of your activity log.
If you close your account, your data is permanently deleted within 30 days, except where retention is required by law.
6. Security
We use industry-standard security practices including encrypted connections (HTTPS), encrypted database storage, and role-based access controls. OAuth tokens are stored encrypted and are never exposed in client-side code. Only authorised platform systems can access your Google credentials.
7. Your Rights
You have the right to:
- Access a copy of the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data.
- Revoke Google API access at any time without affecting your Upranked account login.
To exercise any of these rights, contact us at charan@upranked.co.
8. Cookies
Upranked uses only essential session cookies required to keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.
9. Changes to This Policy
We may update this policy as the platform evolves. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Continued use of the platform after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this policy or how we handle your data? Reach us at charan@upranked.co.